CVE-2023-4964: microfocus asset_management_x Open Redirect
Vulnerability summary
CVE-2023-4964 is a high (CVSS 8.2) Open Redirect vulnerability in microfocus asset_management_x. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.5% of scored vulnerabilities.
Timeline
- 30-10-2023PublishedVulnerability first disclosed.
- 06-09-2024Last modifiedVulnerability information updated.
Description
Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers to redirect a user to malicious websites.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NDiffers
EPSS trend
Probability
0.30%
Chance of exploitation in the next 30 days
Percentile
22%
Versus all other CVEs
30-day change
0.00 pp
From 0.30% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microfocus2 products
- asset_management_x2021.08 | 2021.11 | 2022.05 | 2022.11
- service_management_automation_x2020.05 | 2020.08 | 2020.11 | 2021.02 | 2021.05 | 2021.08 | 2021.11 | 2022.05 | 2022.11
Opentext2 products
- asset management x (amx)2021.08 | 2021.11 | 2022.05 | 2022.11
- service management automation x (smax)2020.05 | 2020.08 | 2020.11 | 2021.02 | 2021.05 | 2021.08 | 2021.11 | 2022.05 | 2022.11
2 vendors · 4 products
References
1 links- portal.microfocus.com/s/article/KM000022703?language=en_USVendor Advisory